Privacy policy

Effective 11 May 2026

This privacy policy explains how SIA MODUL processes your personal data when you contact us, use our services or visit our websites. We process data in accordance with the EU General Data Protection Regulation (GDPR) and Latvian law.

1. Data controller

The data controller is SIA "MODUL", registration number 40103174460, registered address: Granīta iela 24, Riga, LV-1057, Latvia.

For data-protection enquiries:
email: info@modul.lv
phone: +371 25867020

2. What data we process

2.1. Data you give us

• contact details: first name, surname, company, role, email, phone;
• the content of your communication: messages sent through the contact form, by email or by phone;
• billing information: billing address, VAT number, bank-account data — when we enter into a contract or issue an invoice;
• delivery information: address, on-site contact person, site access requirements.

2.2. Data we collect automatically

• technical visit data: IP address, browser, device, language, referring page;
• usage data: pages viewed, session duration, clicks — in aggregate, for analytics;
• cookies and similar technologies — see the "Cookies" section.

3. Why and on what legal basis we process data

We process personal data only for specific, lawful purposes. These purposes and their GDPR legal basis are:

• To answer your enquiry (a quote request, a question, a request for a proposal) — basis: pre-contractual steps taken at your request, GDPR Art. 6(1)(b).
• To perform a contract with you or the company you represent — container rental, sale, delivery, installation, servicing — basis: GDPR Art. 6(1)(b).
• To comply with legal obligations (accounting and tax records, responses to public authorities) — basis: GDPR Art. 6(1)(c).
• To improve our services and the site, prevent fraud and maintain security — basis: our legitimate interests, GDPR Art. 6(1)(f).
• To send operational messages about an active order — basis: contract performance or legitimate interest.

We do not process your data for direct marketing or automated profiling unless you have explicitly consented.

4. Who receives your data

We do not sell personal data. We may share it with the following categories of recipients:

• Our employees and team — only those who need the data to do their job.
• Subcontractors and partners helping us deliver the service — transport, installation, servicing crews, when working on your site under your engagement.
• IT and infrastructure providers — website hosting, email, cloud storage, support tools. We have data-processing agreements in place with all of them.
• Professional advisers — accountants, lawyers, auditors, when necessary.
• Public authorities — when required by law (e.g. the State Revenue Service).

5. Transfers outside the EEA

We aim to keep data within the EU/EEA. If any of our IT providers are based outside the EEA, we use appropriate safeguards — Standard Contractual Clauses (SCCs) or other mechanisms permitted under the GDPR.

6. How long we keep data

• Enquiries and correspondence without a subsequent contract — up to 3 years from our last interaction.
• Contracts and accounting documents — 10 years (required by Latvian accounting law).
• Cookies — for each cookie's validity period, normally no longer than 24 months.
• Other data — no longer than necessary for the original purpose.

After the retention period, data is deleted or anonymised.

7. Your rights

Under the GDPR you have the right to:

• access the data we hold about you;
• correct inaccurate or incomplete data;
• erase data ("right to be forgotten") when there is no further legal basis to process it;
• restrict processing in certain situations;
• object to processing based on our legitimate interests;
• receive your data in a machine-readable format for transfer to another controller;
• withdraw consent at any time, where processing is based on it;
• lodge a complaint with a supervisory authority — in Latvia: Datu valsts inspekcija (www.dvi.gov.lv); in Lithuania: Valstybinė duomenų apsaugos inspekcija; in Estonia: Andmekaitse Inspektsioon.

To exercise any of these rights, write to info@modul.lv. We respond within 30 days.

8. Cookies

This website uses only technically necessary cookies (session management, language preference) and, with your consent, statistics cookies for anonymous usage analysis. Details about specific cookies are shown in the cookie notice the first time you open the site.

You can change your cookie settings in your browser at any time.

9. Security

We use technical and organisational measures to protect your data from unauthorised access, loss and alteration — encrypted connections (HTTPS), access control, regular security reviews and trained staff. However, no method of transmission over the internet is 100% secure, so we cannot guarantee absolute security.

10. Children's data

Our services are aimed at businesses and adults. We do not knowingly process data relating to individuals under 16.

11. Changes to this policy

We update this policy when our practices, services or legal requirements change. The current version is effective from the date shown at the top. We will announce material changes on our website.

12. Contact us

Send questions about data processing, or any request to exercise your rights, to:

SIA MODUL
Granīta iela 24, Riga, LV-1057, Latvia
Email: info@modul.lv
Phone: +371 25867020